@prosopo/provider 4.15.14 → 4.15.15

package/dist/api/block.js

@@ -1,32 +1,19 @@
-import { getMaintenanceMode } from "./admin/apiToggleMaintenanceModeEndpoint.js";
 import { BlacklistRequestInspector } from "./blacklistRequestInspector.js";
-const blockMiddleware = (providerEnvironment) => {
-  let blacklistRequestInspector;
-  const environmentReadinessWaiter = providerEnvironment.isReady.bind(providerEnvironment);
-  return (req, res, next) => {
-    if (getMaintenanceMode()) {
-      return next();
-    }
-    if (!blacklistRequestInspector) {
-      try {
-        const db = providerEnvironment.getDb();
-        const userAccessRulesStorage = db.getUserAccessRulesStorage();
-        blacklistRequestInspector = new BlacklistRequestInspector(
-          userAccessRulesStorage,
-          environmentReadinessWaiter,
-          db
-        );
-      } catch {
-        return next();
-      }
-    }
-    return blacklistRequestInspector.abortRequestForBlockedUsers(
-      req,
-      res,
-      next
-    );
-  };
-};
-export {
-  blockMiddleware
+import { getMaintenanceMode } from "./admin/apiToggleMaintenanceModeEndpoint.js";
+//#region src/api/block.ts
+var blockMiddleware = (providerEnvironment) => {
+	let blacklistRequestInspector;
+	const environmentReadinessWaiter = providerEnvironment.isReady.bind(providerEnvironment);
+	return (req, res, next) => {
+		if (getMaintenanceMode()) return next();
+		if (!blacklistRequestInspector) try {
+			const db = providerEnvironment.getDb();
+			blacklistRequestInspector = new BlacklistRequestInspector(db.getUserAccessRulesStorage(), environmentReadinessWaiter, db);
+		} catch {
+			return next();
+		}
+		return blacklistRequestInspector.abortRequestForBlockedUsers(req, res, next);
+	};
 };
+//#endregion
+export { blockMiddleware };

package/dist/api/captcha/checkSpamEmail.js

@@ -1,103 +1,93 @@
+import { recordSpamEmail } from "../metrics.js";
+import { checkSpamEmail } from "../../tasks/spam/checkSpamEmail.js";
+import { Tasks } from "../../tasks/tasks.js";
+import { getMaintenanceMode } from "../admin/apiToggleMaintenanceModeEndpoint.js";
 import { ProsopoApiError } from "@prosopo/common";
-import { safeLine, INPUT_LIMITS } from "@prosopo/types";
+import { INPUT_LIMITS, safeLine } from "@prosopo/types";
 import { extractDomainFromEmail } from "@prosopo/util";
 import { object } from "zod";
-import "../../tasks/index.js";
-import { checkSpamEmail as checkSpamEmail$1 } from "../../tasks/spam/checkSpamEmail.js";
-import { getMaintenanceMode } from "../admin/apiToggleMaintenanceModeEndpoint.js";
-import { recordSpamEmail } from "../metrics.js";
-import { Tasks } from "../../tasks/tasks.js";
-const CheckSpamEmailRequestBody = object({
-  email: safeLine(INPUT_LIMITS.EMAIL),
-  dapp: safeLine(INPUT_LIMITS.ID)
+//#region src/api/captcha/checkSpamEmail.ts
+var CheckSpamEmailRequestBody = object({
+	email: safeLine(INPUT_LIMITS.EMAIL),
+	dapp: safeLine(INPUT_LIMITS.ID)
 });
-const checkSpamEmail = (env) => async (req, res, next) => {
-  let email;
-  let dapp;
-  try {
-    ({ email, dapp } = CheckSpamEmailRequestBody.parse(req.body));
-  } catch (err) {
-    return next(
-      new ProsopoApiError("CAPTCHA.PARSE_ERROR", {
-        context: { code: 400, error: err },
-        i18n: req.i18n,
-        logger: req.logger
-      })
-    );
-  }
-  try {
-    const emailDomain = extractDomainFromEmail(email);
-    req.logger.info(() => ({
-      msg: "Check spam email handler entry",
-      data: {
-        emailDomain,
-        path: req.path,
-        method: req.method
-      }
-    }));
-    if (getMaintenanceMode()) {
-      req.logger.info(() => ({
-        msg: "Maintenance mode active - returning isSpam=false",
-        data: { emailDomain }
-      }));
-      return res.json({ isSpam: false, emailDomain });
-    }
-    const tasks = new Tasks(env, req.logger);
-    const clientRecord = await tasks.db.getClientRecord(dapp);
-    if (!clientRecord) {
-      return next(
-        new ProsopoApiError("API.SITE_KEY_NOT_REGISTERED", {
-          context: { code: 400, siteKey: dapp },
-          i18n: req.i18n,
-          logger: req.logger
-        })
-      );
-    }
-    const valid = clientRecord.settings.spamEmailDomainCheckEnabled;
-    if (!valid) {
-      return next(
-        new ProsopoApiError("API.BAD_REQUEST", {
-          context: {
-            code: 400,
-            siteKey: dapp
-          },
-          i18n: req.i18n,
-          logger: req.logger
-        })
-      );
-    }
-    const isSpam = await checkSpamEmail$1(
-      email,
-      tasks.db,
-      env.config,
-      req.logger
-    );
-    req.logger.info(() => ({
-      msg: "Spam email check result",
-      data: {
-        emailDomain,
-        isSpam
-      }
-    }));
-    recordSpamEmail(isSpam ? "spam" : "ham");
-    return res.json({
-      isSpam,
-      emailDomain
-    });
-  } catch (error) {
-    req.logger.error(() => ({
-      msg: "Error in check spam email handler",
-      error
-    }));
-    return next(
-      new ProsopoApiError("API.INTERNAL_SERVER_ERROR", {
-        context: { code: 500 },
-        i18n: req.i18n,
-        logger: req.logger
-      })
-    );
-  }
-};
-export {
-  checkSpamEmail as default
+var checkSpamEmail_default = (env) => async (req, res, next) => {
+	let email;
+	let dapp;
+	try {
+		({email, dapp} = CheckSpamEmailRequestBody.parse(req.body));
+	} catch (err) {
+		return next(new ProsopoApiError("CAPTCHA.PARSE_ERROR", {
+			context: {
+				code: 400,
+				error: err
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+	}
+	try {
+		const emailDomain = extractDomainFromEmail(email);
+		req.logger.info(() => ({
+			msg: "Check spam email handler entry",
+			data: {
+				emailDomain,
+				path: req.path,
+				method: req.method
+			}
+		}));
+		if (getMaintenanceMode()) {
+			req.logger.info(() => ({
+				msg: "Maintenance mode active - returning isSpam=false",
+				data: { emailDomain }
+			}));
+			return res.json({
+				isSpam: false,
+				emailDomain
+			});
+		}
+		const tasks = new Tasks(env, req.logger);
+		const clientRecord = await tasks.db.getClientRecord(dapp);
+		if (!clientRecord) return next(new ProsopoApiError("API.SITE_KEY_NOT_REGISTERED", {
+			context: {
+				code: 400,
+				siteKey: dapp
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+		if (!clientRecord.settings.spamEmailDomainCheckEnabled) return next(new ProsopoApiError("API.BAD_REQUEST", {
+			context: {
+				code: 400,
+				siteKey: dapp
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+		const isSpam = await checkSpamEmail(email, tasks.db, env.config, req.logger);
+		req.logger.info(() => ({
+			msg: "Spam email check result",
+			data: {
+				emailDomain,
+				isSpam
+			}
+		}));
+		recordSpamEmail(isSpam ? "spam" : "ham");
+		return res.json({
+			isSpam,
+			emailDomain
+		});
+	} catch (error) {
+		req.logger.error(() => ({
+			msg: "Error in check spam email handler",
+			error
+		}));
+		return next(new ProsopoApiError("API.INTERNAL_SERVER_ERROR", {
+			context: { code: 500 },
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+	}
 };
+//#endregion
+export { checkSpamEmail_default as default };

package/dist/api/captcha/contextAwareValidation.js

@@ -1,20 +1,26 @@
 import { ContextType, contextAwareThresholdDefault } from "@prosopo/types";
+//#region src/api/captcha/contextAwareValidation.ts
+/**
+* Determines the context type based on the webView flag
+* @param webView - Whether the request is from a WebView
+* @returns The context type (Webview or Default)
+*/
 function determineContextType(webView) {
-  return webView ? ContextType.Webview : ContextType.Default;
+	return webView ? ContextType.Webview : ContextType.Default;
 }
+/**
+* Gets the threshold for a specific context type from client settings
+* @param settings - Client settings
+* @param contextType - The context type to get the threshold for
+* @returns The threshold for the context type, or the global threshold if not configured
+*/
 function getContextThreshold(settings, contextType) {
-  const contextAware = settings.contextAware;
-  if (contextAware === void 0) {
-    return contextAwareThresholdDefault;
-  }
-  const contexts = contextAware.contexts;
-  let contextConfig;
-  if (contexts !== void 0) {
-    contextConfig = contexts[contextType];
-  }
-  return contextConfig?.threshold ?? contextAwareThresholdDefault;
+	const contextAware = settings.contextAware;
+	if (contextAware === void 0) return contextAwareThresholdDefault;
+	const contexts = contextAware.contexts;
+	let contextConfig;
+	if (contexts !== void 0) contextConfig = contexts[contextType];
+	return contextConfig?.threshold ?? contextAwareThresholdDefault;
 }
-export {
-  determineContextType,
-  getContextThreshold
-};
+//#endregion
+export { determineContextType, getContextThreshold };

package/dist/api/captcha/getFrictionlessCaptchaChallenge/accessPolicy.js

@@ -1,142 +1,128 @@
-import { CaptchaType, FrictionlessReason } from "@prosopo/types";
-import "../../../tasks/frictionless/frictionlessTasks.js";
+import { FrictionlessReason as FrictionlessReason$1 } from "../../../tasks/frictionless/frictionlessTasks.js";
 import { attachHoneypot } from "./honeypotResponse.js";
-const handleAccessPolicy = async (input, res) => {
-  if (!input.userAccessPolicy) {
-    return {
-      handled: false,
-      botScore: input.botScore,
-      scoreComponents: input.scoreComponents
-    };
-  }
-  const { tasks, clientRecord, userAccessPolicy, logger } = input;
-  logger.info(() => ({
-    msg: "User access policy matched",
-    data: {
-      policy: userAccessPolicy,
-      captchaType: userAccessPolicy.captchaType,
-      userScope: input.userScope
-    }
-  }));
-  const scoreUpdate = tasks.frictionlessManager.scoreIncreaseAccessPolicy(
-    userAccessPolicy,
-    input.baseBotScore,
-    input.botScore,
-    input.scoreComponents
-  );
-  const botScore = scoreUpdate.score;
-  const scoreComponents = scoreUpdate.scoreComponents;
-  tasks.frictionlessManager.updateScore(botScore, scoreComponents);
-  if (userAccessPolicy.type === "block") {
-    logger.info(() => ({
-      msg: "Frictionless decision",
-      data: {
-        decision: "block",
-        captchaType: CaptchaType.image
-      }
-    }));
-    await tasks.frictionlessManager.registerBlockedSession({
-      solvedImagesCount: clientRecord.settings.imageMaxRounds,
-      userSitekeyIpHash: input.userSitekeyIpHash,
-      reason: FrictionlessReason.ACCESS_POLICY_BLOCK,
-      siteKey: input.dapp,
-      ipInfo: input.ipInfo,
-      headers: input.flatHeaders
-    });
-    return {
-      handled: true,
-      response: res.status(401).json({ error: "Unauthorized" })
-    };
-  }
-  const autoBanThreshold = clientRecord.settings.autoBanScoreThreshold;
-  if (autoBanThreshold !== void 0 && Number(botScore) >= autoBanThreshold) {
-    logger.info(() => ({
-      msg: "Frictionless decision",
-      data: {
-        decision: "auto_ban_score",
-        botScore,
-        autoBanThreshold,
-        captchaType: userAccessPolicy.captchaType
-      }
-    }));
-    await tasks.frictionlessManager.registerBlockedSession({
-      solvedImagesCount: clientRecord.settings.imageMaxRounds,
-      userSitekeyIpHash: input.userSitekeyIpHash,
-      reason: FrictionlessReason.AUTO_BAN_SCORE,
-      siteKey: input.dapp,
-      ipInfo: input.ipInfo,
-      headers: input.flatHeaders
-    });
-    return {
-      handled: true,
-      response: res.status(401).json({ error: "Unauthorized" })
-    };
-  }
-  const captchaTypeBaseParams = {
-    userSitekeyIpHash: input.userSitekeyIpHash,
-    reason: FrictionlessReason.USER_ACCESS_POLICY,
-    siteKey: input.dapp,
-    ipInfo: input.ipInfo,
-    headers: input.flatHeaders
-  };
-  if (userAccessPolicy.captchaType === CaptchaType.image) {
-    logger.info(() => ({
-      msg: "Frictionless decision",
-      data: {
-        decision: "user_access_policy",
-        captchaType: CaptchaType.image
-      }
-    }));
-    attachHoneypot(res, clientRecord);
-    return {
-      handled: true,
-      response: res.json(
-        await tasks.frictionlessManager.sendImageCaptcha({
-          ...captchaTypeBaseParams,
-          solvedImagesCount: userAccessPolicy.solvedImagesCount ? Math.min(
-            userAccessPolicy.solvedImagesCount,
-            clientRecord.settings.imageMaxRounds
-          ) : clientRecord.settings.imageMaxRounds
-        })
-      )
-    };
-  }
-  if (userAccessPolicy.captchaType === CaptchaType.pow) {
-    logger.info(() => ({
-      msg: "Frictionless decision",
-      data: {
-        decision: "user_access_policy",
-        captchaType: CaptchaType.pow
-      }
-    }));
-    attachHoneypot(res, clientRecord);
-    return {
-      handled: true,
-      response: res.json(
-        await tasks.frictionlessManager.sendPowCaptcha(captchaTypeBaseParams)
-      )
-    };
-  }
-  if (userAccessPolicy.captchaType === CaptchaType.puzzle) {
-    logger.info(() => ({
-      msg: "Frictionless decision",
-      data: {
-        decision: "user_access_policy",
-        captchaType: CaptchaType.puzzle
-      }
-    }));
-    attachHoneypot(res, clientRecord);
-    return {
-      handled: true,
-      response: res.json(
-        await tasks.frictionlessManager.sendPuzzleCaptcha(
-          captchaTypeBaseParams
-        )
-      )
-    };
-  }
-  return { handled: false, botScore, scoreComponents };
-};
-export {
-  handleAccessPolicy
+import { CaptchaType } from "@prosopo/types";
+//#region src/api/captcha/getFrictionlessCaptchaChallenge/accessPolicy.ts
+var handleAccessPolicy = async (input, res) => {
+	if (!input.userAccessPolicy) return {
+		handled: false,
+		botScore: input.botScore,
+		scoreComponents: input.scoreComponents
+	};
+	const { tasks, clientRecord, userAccessPolicy, logger } = input;
+	logger.info(() => ({
+		msg: "User access policy matched",
+		data: {
+			policy: userAccessPolicy,
+			captchaType: userAccessPolicy.captchaType,
+			userScope: input.userScope
+		}
+	}));
+	const scoreUpdate = tasks.frictionlessManager.scoreIncreaseAccessPolicy(userAccessPolicy, input.baseBotScore, input.botScore, input.scoreComponents);
+	const botScore = scoreUpdate.score;
+	const scoreComponents = scoreUpdate.scoreComponents;
+	tasks.frictionlessManager.updateScore(botScore, scoreComponents);
+	if (userAccessPolicy.type === "block") {
+		logger.info(() => ({
+			msg: "Frictionless decision",
+			data: {
+				decision: "block",
+				captchaType: CaptchaType.image
+			}
+		}));
+		await tasks.frictionlessManager.registerBlockedSession({
+			solvedImagesCount: clientRecord.settings.imageMaxRounds,
+			userSitekeyIpHash: input.userSitekeyIpHash,
+			reason: FrictionlessReason$1.ACCESS_POLICY_BLOCK,
+			siteKey: input.dapp,
+			ipInfo: input.ipInfo,
+			headers: input.flatHeaders
+		});
+		return {
+			handled: true,
+			response: res.status(401).json({ error: "Unauthorized" })
+		};
+	}
+	const autoBanThreshold = clientRecord.settings.autoBanScoreThreshold;
+	if (autoBanThreshold !== void 0 && Number(botScore) >= autoBanThreshold) {
+		logger.info(() => ({
+			msg: "Frictionless decision",
+			data: {
+				decision: "auto_ban_score",
+				botScore,
+				autoBanThreshold,
+				captchaType: userAccessPolicy.captchaType
+			}
+		}));
+		await tasks.frictionlessManager.registerBlockedSession({
+			solvedImagesCount: clientRecord.settings.imageMaxRounds,
+			userSitekeyIpHash: input.userSitekeyIpHash,
+			reason: FrictionlessReason$1.AUTO_BAN_SCORE,
+			siteKey: input.dapp,
+			ipInfo: input.ipInfo,
+			headers: input.flatHeaders
+		});
+		return {
+			handled: true,
+			response: res.status(401).json({ error: "Unauthorized" })
+		};
+	}
+	const captchaTypeBaseParams = {
+		userSitekeyIpHash: input.userSitekeyIpHash,
+		reason: FrictionlessReason$1.USER_ACCESS_POLICY,
+		siteKey: input.dapp,
+		ipInfo: input.ipInfo,
+		headers: input.flatHeaders
+	};
+	if (userAccessPolicy.captchaType === CaptchaType.image) {
+		logger.info(() => ({
+			msg: "Frictionless decision",
+			data: {
+				decision: "user_access_policy",
+				captchaType: CaptchaType.image
+			}
+		}));
+		attachHoneypot(res, clientRecord);
+		return {
+			handled: true,
+			response: res.json(await tasks.frictionlessManager.sendImageCaptcha({
+				...captchaTypeBaseParams,
+				solvedImagesCount: userAccessPolicy.solvedImagesCount ? Math.min(userAccessPolicy.solvedImagesCount, clientRecord.settings.imageMaxRounds) : clientRecord.settings.imageMaxRounds
+			}))
+		};
+	}
+	if (userAccessPolicy.captchaType === CaptchaType.pow) {
+		logger.info(() => ({
+			msg: "Frictionless decision",
+			data: {
+				decision: "user_access_policy",
+				captchaType: CaptchaType.pow
+			}
+		}));
+		attachHoneypot(res, clientRecord);
+		return {
+			handled: true,
+			response: res.json(await tasks.frictionlessManager.sendPowCaptcha(captchaTypeBaseParams))
+		};
+	}
+	if (userAccessPolicy.captchaType === CaptchaType.puzzle) {
+		logger.info(() => ({
+			msg: "Frictionless decision",
+			data: {
+				decision: "user_access_policy",
+				captchaType: CaptchaType.puzzle
+			}
+		}));
+		attachHoneypot(res, clientRecord);
+		return {
+			handled: true,
+			response: res.json(await tasks.frictionlessManager.sendPuzzleCaptcha(captchaTypeBaseParams))
+		};
+	}
+	return {
+		handled: false,
+		botScore,
+		scoreComponents
+	};
 };
+//#endregion
+export { handleAccessPolicy };

package/dist/api/captcha/getFrictionlessCaptchaChallenge/constants.js

@@ -1,13 +1,12 @@
-const DEFAULT_FRICTIONLESS_THRESHOLD = 0.5;
-const getRoundsFromSimScore = (simScore) => {
-  if (simScore >= 0.9) return 0;
-  if (simScore >= 0.8) return 3;
-  if (simScore >= 0.7) return 4;
-  if (simScore >= 0.6) return 6;
-  if (simScore >= 0.5) return 7;
-  return 8;
-};
-export {
-  DEFAULT_FRICTIONLESS_THRESHOLD,
-  getRoundsFromSimScore
+//#region src/api/captcha/getFrictionlessCaptchaChallenge/constants.ts
+var DEFAULT_FRICTIONLESS_THRESHOLD = .5;
+var getRoundsFromSimScore = (simScore) => {
+	if (simScore >= .9) return 0;
+	if (simScore >= .8) return 3;
+	if (simScore >= .7) return 4;
+	if (simScore >= .6) return 6;
+	if (simScore >= .5) return 7;
+	return 8;
 };
+//#endregion
+export { DEFAULT_FRICTIONLESS_THRESHOLD, getRoundsFromSimScore };